Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2019-25668 |
|
SQL Injection in sqli (CVE-2019-25668)
SQL injection in sqli (CVE-2019-25668). Confidential information can be exposed externally.
|
| CVE-2019-25671 |
|
Path Traversal in c (CVE-2019-25671)
path traversal in c (CVE-2019-25671). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25662 |
|
SQL Injection in sqli (CVE-2019-25662)
SQL injection in sqli (CVE-2019-25662). Confidential information can be exposed externally.
|
| CVE-2019-25664 |
|
SQL Injection in sqli (CVE-2019-25664)
SQL injection in sqli (CVE-2019-25664). Confidential information can be exposed externally.
|
| CVE-2026-5580 |
|
Vulnerability in sqli (CVE-2026-5580)
vulnerability in sqli (CVE-2026-5580). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5583 |
|
Vulnerability in sqli (CVE-2026-5583)
vulnerability in sqli (CVE-2026-5583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5579 |
|
Vulnerability in sqli (CVE-2026-5579)
vulnerability in sqli (CVE-2026-5579). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5576 |
|
Vulnerability in CVE-2026-5576 (CVE-2026-5576)
vulnerability in CVE-2026-5576 (CVE-2026-5576). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5578 |
|
Vulnerability in sqli (CVE-2026-5578)
vulnerability in sqli (CVE-2026-5578). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5575 |
|
Vulnerability in sqli (CVE-2026-5575)
vulnerability in sqli (CVE-2026-5575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5567 |
|
Buffer Overflow in tenda (CVE-2026-5567)
vulnerability in tenda (CVE-2026-5567). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5565 |
|
Vulnerability in sqli (CVE-2026-5565)
vulnerability in sqli (CVE-2026-5565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5564 |
|
Vulnerability in sqli (CVE-2026-5564)
vulnerability in sqli (CVE-2026-5564). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5560 |
|
Vulnerability in sqli (CVE-2026-5560)
vulnerability in sqli (CVE-2026-5560). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5561 |
|
Vulnerability in CVE-2026-5561 (CVE-2026-5561)
vulnerability in CVE-2026-5561 (CVE-2026-5561). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5555 |
|
Vulnerability in sqli (CVE-2026-5555)
vulnerability in sqli (CVE-2026-5555). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5558 |
|
Vulnerability in sqli (CVE-2026-5558)
vulnerability in sqli (CVE-2026-5558). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5554 |
|
Vulnerability in sqli (CVE-2026-5554)
vulnerability in sqli (CVE-2026-5554). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5553 |
|
Vulnerability in sqli (CVE-2026-5553)
vulnerability in sqli (CVE-2026-5553). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5552 |
|
Vulnerability in sqli (CVE-2026-5552)
vulnerability in sqli (CVE-2026-5552). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5551 |
|
Vulnerability in sqli (CVE-2026-5551)
vulnerability in sqli (CVE-2026-5551). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5550 |
|
A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The...
A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.
|
| CVE-2026-5548 |
|
Buffer Overflow in tenda (CVE-2026-5548)
vulnerability in tenda (CVE-2026-5548). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5549 |
|
Vulnerability in tenda (CVE-2026-5549)
vulnerability in tenda (CVE-2026-5549). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5547 |
|
Command Injection in tenda (CVE-2026-5547)
command injection in tenda (CVE-2026-5547). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5546 |
|
Vulnerability in CVE-2026-5546 (CVE-2026-5546)
vulnerability in CVE-2026-5546 (CVE-2026-5546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5541 |
|
Cross-Site Scripting (XSS) in CVE-2026-5541 (CVE-2026-5541)
cross-site scripting in CVE-2026-5541 (CVE-2026-5541). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5542 |
|
Cross-Site Scripting (XSS) in CVE-2026-5542 (CVE-2026-5542)
cross-site scripting in CVE-2026-5542 (CVE-2026-5542). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5543 |
|
Vulnerability in sqli (CVE-2026-5543)
vulnerability in sqli (CVE-2026-5543). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5540 |
|
Vulnerability in sqli (CVE-2026-5540)
vulnerability in sqli (CVE-2026-5540). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5539 |
|
Cross-Site Scripting (XSS) in CVE-2026-5539 (CVE-2026-5539)
cross-site scripting in CVE-2026-5539 (CVE-2026-5539). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5537 |
|
Vulnerability in c (CVE-2026-5537)
vulnerability in c (CVE-2026-5537). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5535 |
|
Path Traversal in path-traversal (CVE-2026-5535)
path traversal in path-traversal (CVE-2026-5535). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5534 |
|
Vulnerability in sqli (CVE-2026-5534)
vulnerability in sqli (CVE-2026-5534). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5527 |
|
Vulnerability in tenda (CVE-2026-5527)
vulnerability in tenda (CVE-2026-5527). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5526 |
|
Vulnerability in tenda (CVE-2026-5526)
vulnerability in tenda (CVE-2026-5526). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25252 |
|
Out-of-Bounds Write in dos (CVE-2018-25252)
out-of-bounds write in dos (CVE-2018-25252). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25248 |
|
Cross-Site Scripting (XSS) in mybb (CVE-2018-25248)
cross-site scripting in mybb (CVE-2018-25248). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-20052 |
|
Unrestricted File Upload in snewscms (CVE-2016-20052)
vulnerability in snewscms (CVE-2016-20052). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20050 |
|
Out-of-Bounds Write in dos (CVE-2016-20050)
out-of-bounds write in dos (CVE-2016-20050). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2936 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2936)
cross-site scripting in wordpress (CVE-2026-2936). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3309 |
|
Code Injection in wordpress (CVE-2026-3309)
code injection in wordpress (CVE-2026-3309). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3666 |
|
Path Traversal in wordpress (CVE-2026-3666)
path traversal in wordpress (CVE-2026-3666). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1233 |
|
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing hardcoded MySQL database credentials for the vendor's external telemetry server in the `Mementor_TT...
|
| CVE-2026-0626 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-0626)
cross-site scripting in wordpress (CVE-2026-0626). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-14938 |
|
Unrestricted File Upload in wordpress (CVE-2025-14938)
vulnerability in wordpress (CVE-2025-14938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3445 |
|
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass in all versions up to, and including, 4.16.11. This is due to a missing ownership verification on the...
|
| CVE-2026-2826 |
|
Vulnerability in wordpress (CVE-2026-2826)
vulnerability in wordpress (CVE-2026-2826). Risk of unauthorized operations or information disclosure. Exploitable via ``upload_files``.
|
| CVE-2026-5425 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5425)
cross-site scripting in wordpress (CVE-2026-5425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2437 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2437)
cross-site scripting in wordpress (CVE-2026-2437). Risk of unauthorized operations or information disclosure.
|